Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
File:                     BkapmNbNXVvutQ9MkpExVTb3xbQ.mft (raw, json)
Hash identifier:          Xp50UZlylvYwjzDImZzMRr+JSI+YrJF49rGbRl9ceGc=
Subject key identifier:   E8:82:54:13:78:03:B8:A7:08:22:ED:D5:10:A3:F3:23:7F:10:AB:A9
Authority key identifier: 06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4
Certificate issuer:       /CN=F36CAE5AAF/serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
Certificate serial:       0697
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
Manifest number:          0696
Signing time:             Thu 19 Jun 2025 02:05:58 +0000
Manifest this update:     Thu 19 Jun 2025 02:05:57 +0000
Manifest next update:     Sat 21 Jun 2025 02:05:57 +0000
Files and hashes:         1: BkapmNbNXVvutQ9MkpExVTb3xbQ.crl (hash: 7sBSyyDBr5rAVAGndmcOijjmDiLopLJ2xotqZQDKCmg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Jun 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAE5AAF, serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
        Validity
            Not Before: Jun 19 02:05:57 2025 GMT
            Not After : Jun 21 02:05:57 2025 GMT
        Subject: CN=68537086-4e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:b5:62:24:c9:83:22:6f:c3:a7:61:39:6b:
                    24:26:97:48:b0:e4:fd:3a:d1:dc:9b:02:87:33:cf:
                    7c:d9:6a:b2:ff:aa:80:00:f1:0c:82:ed:88:66:bb:
                    73:4f:2c:25:59:a3:68:d9:ae:14:82:a2:b4:d7:ce:
                    16:74:60:ae:7c:23:79:04:0f:a7:b2:39:30:5e:b2:
                    c9:5e:53:29:3f:dd:cb:a5:43:c6:80:10:a7:e3:0c:
                    e6:b8:88:a1:f1:4f:13:d6:da:bb:83:97:72:74:15:
                    d5:e5:a7:2b:89:24:97:a9:ae:ed:9d:b6:6e:cf:b0:
                    e8:7c:8a:5e:cb:5f:5d:31:78:04:4d:15:b0:6d:f6:
                    41:bc:a3:a2:ab:30:eb:b0:51:75:a8:2b:a5:07:0d:
                    72:0f:ec:b1:3a:08:3d:e7:d9:d9:a9:01:80:f4:1d:
                    5a:ab:21:d1:2f:72:3d:11:cf:9f:31:1d:8e:43:49:
                    3d:1f:72:37:97:44:86:53:66:dc:2d:30:3d:a8:d0:
                    5b:9b:a5:5e:b1:1d:cb:a5:a7:06:e7:78:fd:3d:2a:
                    74:8c:53:ba:3f:a6:4d:5b:0f:98:d5:c5:7b:fa:15:
                    b8:36:f3:ba:62:79:80:25:90:56:34:1e:86:eb:79:
                    62:bf:a3:b7:f0:de:d0:d2:ec:b6:8b:c6:94:a2:24:
                    19:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:82:54:13:78:03:B8:A7:08:22:ED:D5:10:A3:F3:23:7F:10:AB:A9
            X509v3 Authority Key Identifier:
                keyid:06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:56:1b:d3:9e:97:c9:41:01:65:e9:ec:37:c8:1f:53:a5:5a:
         96:ed:3e:c3:be:98:f6:6f:9e:aa:f1:8d:79:7b:3c:02:3d:84:
         a4:72:2a:6b:08:70:57:fb:00:0e:0d:e2:fe:1f:53:4e:cc:4e:
         df:d7:d8:a2:15:9c:83:7e:34:a3:17:2e:98:80:fe:83:70:6c:
         d7:b8:95:31:2e:83:87:14:c5:d7:09:b4:1b:f8:4d:a8:65:23:
         d3:10:8a:d3:ab:83:f7:4f:3f:36:3c:a6:9a:65:09:1b:bf:73:
         89:9e:79:d9:7a:a0:c4:6a:5d:39:19:1d:0e:10:c5:f3:34:0b:
         a5:18:b7:fd:c0:ea:f0:a9:1f:36:24:eb:b2:a1:59:b8:31:d9:
         97:c2:cd:22:2f:70:37:96:36:d6:6c:23:c6:cd:ea:f8:68:a9:
         6b:b6:17:54:4e:93:4a:28:f8:9a:1b:90:ce:82:2f:22:62:7d:
         52:0b:35:6f:28:5f:a1:aa:f8:f5:48:13:a6:3e:84:c3:a9:8f:
         9f:af:13:ab:f4:8e:68:92:7d:d0:18:36:93:5f:d6:39:8d:39:
         c7:95:e3:67:be:35:54:27:2b:71:e3:9f:28:ba:f4:2d:7f:d0:
         f3:3a:c0:5d:75:57:60:35:60:75:cf:0e:18:7d:ae:d1:b5:a2:
         27:ae:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:50:38 2025 by rpki-client